Aryaka SmartSecure complements Aryaka SmartConnect with managed SD-WAN Security and SASE as-a-Service offerings. Our security offerings cover both branch and cloud deployments, offering enterprises choice to optimally meet their security requirements.

  • At the branch, an access firewall within the ANAP offers ‘north-south’ control, while an optional NFV-based Tier-1 managed next-generation firewall offers comprehensive security at the perimeter, including L7 protection.
  • Aryaka Zones extends this to the LAN with ‘east-west’ security, through site-segmentation with policy-based access.
  • The ANAP also supports VRF-based micro-segmentation, enabling multi-tenancy.
  • Extends security to the cloud via cloud-security vendor solutions, including Check Point, Palo Alto Networks, Zscaler, Cisco Umbrella and Symantec.
  • Next Generation Firewall (NGFW) functionality supported as a Virtual Network Function (VNF).
  • Remote Access solutions (Aryaka Private Access and VPN Accelerate) optimally support the needs of the hybrid workplace.

Core Capabilities

Cloud Security Connections

Secure, local Internet break out is enabled though Check Point, Palo Alto Networks, Zscaler, Cisco Umbrella and Symantec cloud security services.


Micro-segmentation adds to the ANAP’s zones functionality. On-site, VLANs provide the local segmentation for internal and DMZ zones. Micro-segmentation extends this across the Aryaka core network via a BGP-driven VRF ‘lite’ functionality.

Edge Security

Aryaka’s ANAP supports NFV functionality for additional SDN-delivered services. We partner with Tier-1 security vendors Check Point and Palo Alto Networks for embedded Next Generation Firewall functionality, enabling choice.

Remote Access Solutions

SmartSecure Private Access provides a complete solution – including clients – that ideally supports the emerging hybrid workspace.

SmartSecure VPN Accelerate addresses the needs of customers who want to accelerate their existing VPN solution.

Secure Internet Access

Aryaka SmartSecure provides Secure Internet Access for on-site and remote workers anywhere in the world via our Secure Web Gateway and also integrates support for Check Point Harmony Connect Internet Access.

Secure Access Service Edge (SASE)

Aryaka SmartSecure architecturally integrates cloud-delivered security solutions such as Check Point CloudGuard Connect to deliver on a best-of-breed SASE solution.

Deployment Options


Aryaka SmartSecure integrates advanced Next-Generation Firewall (NGFW) functionality in Aryaka’s ANAP service edge CPE as a VNF (Virtual Network Function). Aryaka can partner with best-of-breed vendors to offer enterprises solutions that are optimally tailored to their particular WAN and Security architecture.


Aryaka SmartSecure offers option to deploy cloud security solutions like Aryaka Secure Web Gateway and FWaaS, Check Point Harmony Connect Internet Access and provides connectors to leading cloud-based security vendors.

Hybrid Workplace Solution

SmartSecure Private Access is a managed VPN solution that combines superior application performance with complete flexibility in dynamic bandwidth allocation to remote workers or branches. It is a complete VPN solution with device clients for all major desktop and mobile OS and containerized VPN server nodes in Aryaka HyperScale PoPs.

VPN Acceleration

SmartSecure VPN Accelerate addresses the needs of customers who want to keep their existing VPN solution (device clients and concentrators), but also want to improve its performance to provide an improved user experience.

Benefits achieved by using Aryaka SmartSecure

Managed SD-WAN Security

With WAN security top-of-mind, Aryaka’s SmartSecure offers enterprises an end-to-end secure infrastructure from first-mile, middle-mile, and into the cloud.

Operational Simplicity

Edge and cloud security leveraging Tier-1 partners is part of Aryaka’s end-to-end managed SD-WAN, hiding complexity from the enterprise.

Lower TCO

SD-WAN security helps enterprises generate the maximum return on their SD-WAN investment, ensuring protection from external threats and the integrity of corporate data, anywhere in the world.

Optimal Hybrid Workplace

SmartSecure remote access solutions optimize the user experience for both remote and branch employees – anytime, anywhere, irrespective of changing traffic loads.

Aryaka’s SmartSecure is aligned with the evolving Secure Access Service Edge (SASE) architecture. Our security offerings cover both the branch and the cloud, offering enterprises the choice of where to deploy their security based on individual requirements. We offer a single operational model and feature set that spans both domains.


Flexibility : Choice Of Optional Security Posture, Location, Edge Or Cloud

Remote Access Capabilities

SmartSecure Private Access s is a complete, managed VPN as-a-service solution that includes SaaS acceleration, providing secure access and optimal performance for branch and remote users.

SmartSecure VPN Accelerate addresses the needs of customers who want to accelerate their existing (non-Aryaka) VPN solution.

Up To 3X Faster Remote Access

Improve productivity – Reduce complexity and cost – Accelerate SaaS applications

For Remote & Mobile Employees

  • Industry-leading on-premises and cloud/SaaS application performance
  • Access consistently fast data, voice and video from anywhere in the world and collaborate effectively
  • Have the same, superior user experience – whether working remotely or in the office

For IT

  • Deliver on the needs of the hybrid workplace
  • Simplify VPN infrastructure and reduce costs
  • Gain end-to-end network and application visibility
  • Deploy in hours globally with a managed service approach integrated in Aryaka’s architecture

Aryaka Security Architecture

The Aryaka Private Network delivers true multi-tenant data partitioning though virtualized compute, network, and storage resources. The resulting private backbone is more secure than competing MPLS services where customer traffic is not encrypted. This includes dedicated PoPs located in secured data centers, dedicated Layer 2 and Layer 3 links, encryption with IPSec, key management, and DDoS protection. We manage this via a sophisticated orchestration platform, to ensure that your users have assured access to your vital applications and data, anywhere, and at any time.

Aryaka maintains a robust security program that meets internationally accepted security practices.

SOC 2: SSAE-18 Reports against Aryaka’s policies and processes
Cloud Controls Matrix (CCM)
Consensus Assessments Initiative Questionnaire (CAIQ)
ISO 27001:2013
Third party network scan reports available within 48 hours upon request

About Aryaka

Aryaka, the Cloud-First WAN and SASE company, and a Gartner “Voice of the Customer” leader, makes it easy for enterprises to consume network and network security solutions delivered as-a-service for a variety of modern deployments. Aryaka uniquely combines innovative SD-WAN and security technology with a global network and a managed service approach to offer the industry’s best customer and application experience. The company’s customers include hundreds of global enterprises including several in the Fortune 100.